T·002

C2 & Tradecraft

C2 framework usage, OPSEC, TTPs, and red team tradecraft across Sliver, Havoc, and Cobalt Strike.

2025-05-17 c2-tradecraft cobalt-strike persistence

Invisible Registry Keys, but Sort of

Creating null-byte prefixed registry keys for persistence — in-memory execution via execute-assembly from a C2 beacon session.